$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb828a82-a639-37c6-a461-e9ec4f33dd43.roa File: cb828a82-a639-37c6-a461-e9ec4f33dd43.roa (raw, json) Hash identifier: qEIMkJMNkhsoShanj/GJvWVutyV/Cxob5TMqC5QH3l4= Subject key identifier: AD:14:E2:D8:9F:B9:11:74:D1:87:35:55:C2:39:81:2A:D2:8F:78:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F698D71D58841A2D2EB8B8680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb828a82-a639-37c6-a461-e9ec4f33dd43.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 23.215.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:71:d5:88:41:a2:d2:eb:8b:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=21d10728-8c8b-41da-bee2-faf5f4891fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:73:1c:91:ed:dc:c0:c0:be:14:46:1b:2b: af:a9:be:c9:bc:af:0a:42:39:15:99:95:c2:64:fd: 58:09:49:79:d2:2f:b5:06:5f:4c:3f:79:18:18:d5: bf:ef:d2:25:e2:ca:06:98:6b:1c:35:41:03:8e:12: 6f:01:27:0a:55:2c:4b:84:18:92:0d:75:91:95:e7: ab:0a:69:89:27:88:6a:ad:19:e2:8c:6f:e9:81:48: 6c:f1:95:48:ac:c3:ca:8c:76:2f:62:41:6e:00:4e: fc:11:bb:a2:53:03:6c:1b:31:cf:7c:bd:c2:0a:fa: 18:5f:6e:d3:4d:64:a0:c8:69:19:5d:92:6a:b2:1c: d6:15:31:26:d5:6b:fe:55:35:6f:ff:05:ee:3b:a2: e2:f9:6f:9f:79:26:56:de:3f:e2:78:bf:23:b6:3c: d0:72:6b:47:52:22:ec:83:05:4b:f2:9e:75:53:33: c8:2b:5c:0b:b1:de:12:1b:ab:2a:f4:32:c1:54:21: a1:81:2f:db:fb:a3:78:a1:fa:e2:82:ad:20:b7:8b: a9:50:b6:91:7c:99:a7:41:7c:6b:77:d5:77:5d:54: f8:13:a9:66:41:7b:43:e6:57:58:52:2d:f5:74:d4: dd:da:f6:02:87:cb:27:9d:65:6d:ef:7a:2f:08:bc: 28:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:14:E2:D8:9F:B9:11:74:D1:87:35:55:C2:39:81:2A:D2:8F:78:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb828a82-a639-37c6-a461-e9ec4f33dd43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:68:6f:a9:c2:f5:bd:86:52:7b:f8:0b:85:54:65:b8:60:b0: 46:ea:65:15:96:2b:f4:ad:62:55:29:70:1a:be:04:35:38:c2: f2:00:ff:12:9b:dc:62:9e:08:d5:c7:33:c4:be:e7:7f:95:d9: 38:08:64:28:da:c8:08:25:87:72:41:c4:86:59:5b:8b:e0:fd: c3:8b:45:75:d4:0d:69:cc:f4:f2:56:2b:bc:58:10:f1:e3:75: c8:51:6d:e0:03:20:6e:82:74:6f:0d:08:23:89:f8:f7:75:0a: 8a:32:5b:24:f4:6e:e6:8b:d3:41:55:80:22:6d:91:1b:02:0b: 72:f7:00:b4:fd:3e:59:20:26:fa:02:d8:75:04:20:f2:ff:f9: 6c:f5:f9:2a:f5:ff:bd:60:2d:6a:e0:59:32:47:53:92:af:53: 74:6b:e9:32:f5:69:0a:7b:88:3f:e4:71:7a:58:fa:12:90:a3: df:c3:80:15:b1:14:4b:12:f4:df:ab:d5:28:44:67:2a:ee:9c: e8:4d:19:df:47:6c:87:ae:a1:ce:f8:92:cd:90:a4:da:9b:94: 9f:fd:82:d1:3f:93:0b:a6:ad:b0:cb:69:0a:5f:b9:19:9e:b4: c1:33:cc:fe:d2:67:86:1e:f9:01:9a:f8:c2:ed:a8:d5:5c:dd: 84:bc:5e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXHViEGi0uuLhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MjFkMTA3MjgtOGM4Yi00MWRhLWJlZTItZmFmNWY0ODkxZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBFzHJHt3MDAvhRGGyuvqb7JvK8KQjkVmZXC ZP1YCUl50i+1Bl9MP3kYGNW/79Il4soGmGscNUEDjhJvAScKVSxLhBiSDXWRleer CmmJJ4hqrRnijG/pgUhs8ZVIrMPKjHYvYkFuAE78EbuiUwNsGzHPfL3CCvoYX27T TWSgyGkZXZJqshzWFTEm1Wv+VTVv/wXuO6Li+W+feSZW3j/ieL8jtjzQcmtHUiLs gwVL8p51UzPIK1wLsd4SG6sq9DLBVCGhgS/b+6N4ofrigq0gt4upULaRfJmnQXxr d9V3XVT4E6lmQXtD5ldYUi31dNTd2vYCh8snnWVt73ovCLwoaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0U4tifuRF00Yc1VcI5gSrSj3jaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2I4MjhhODItYTYzOS0z N2M2LWE0NjEtZTllYzRmMzNkZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9dqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBob6nC9b2GUnv4C4VUZbhgsEbqZRWWK/StYlUpcBq+BDU4wvIA/xKb 3GKeCNXHM8S+53+V2TgIZCjayAglh3JBxIZZW4vg/cOLRXXUDWnM9PJWK7xYEPHj dchRbeADIG6CdG8NCCOJ+Pd1CooyWyT0buaL00FVgCJtkRsCC3L3ALT9PlkgJvoC 2HUEIPL/+Wz1+Sr1/71gLWrgWTJHU5KvU3Rr6TL1aQp7iD/kcXpY+hKQo9/DgBWx FEsS9N+r1ShEZyrunOhNGd9HbIeuoc74ks2QpNqblJ/9gtE/kwumrbDLaQpfuRme tMEzzP7SZ4Ye+QGa+MLtqNVc3YS8XpI= -----END CERTIFICATE-----Generated at Sat Oct 24 10:43:26 2026 by rpki-client